wayground logo

Free Printable Worksheets

Font size

S
M
L
XL
Worksheets

Computer Forensics 2 H

Total questions: 9

Worksheet time: 15mins

Name
Class
Date
1.

Latent data is ____________.

a)

the areas of files and disks that are typically not apparent to the computer user, but contains the data which the operating system has hidden

b)

the only reasons a forensic image of the media is created is because a standard copy doesn't capture the logical data

c)

cannot be evidentiary data

d)

the areas of files and disks that are very apparent to the computer user, and contains the data which the operating system

e)

the only reason a forensic image of the media is created is because a standard copy doesn't capture the illogical data

2.

___________ is the remaining area from the end of the final sector containing data to the end of the cluster.

a)

Swap space

b)

RAM slack

c)

File slack

d)

Unallocated space

e)

Slack space

3.

___________ of numerous files can degrade the performance of a HDD, causing the read/write heads to have to traverse the platters to locate the data.

a)

Deleting

b)

Swapping

c)

Defragmentation

d)

Fragmentation

e)

Bolstering

4.

When a user deletes files, the data typically remains behind _________.

a)

the first character in the files directory entry is replaced with the Greek letter alpha and the file is no longer viewable through conventional methods with the operating system viewing the space previously occupied by the file as available

b)

the last character in the files directory entry is replaced with the Greek letter sigma and the file is still viewable through conventional methods with the operating system viewing the space previously occupied by the file as available

c)

the last character in the files directory entry is replaced with the Greek letter alpha and the file is no longer viewable through conventional methods with the operating system viewing the space previously occupied by the file as available

d)

the first character in the files directory entry is replaced with the Greek letter sigma and the file is still viewable through conventional methods with the operating system viewing the space previously occupied by the file as available

e)

the first character in the files directory entry is replaced with the Greek letter sigma and the file is no longer viewable through conventional methods with the operating system viewing the space previously occupied by the file as available

5.

________ is a device that allows computers to exchange and transmit information through telephone lines.

a)

A modem

b)

A receiver

c)

A swap space

d)

A conjunction junction

e)

A RAM slack

6.

______ allow the user to search all the information available on the web and retrieve any web pages the viewer wishes to explore.

a)

Greek letters

b)

ROM data

c)

Web browsers

d)

DSL lines

e)

Internet trolls

7.

Search engines are ______________.

a)

several directories and indexes on the Internet that are unavailable to assist the user in locating a particular topic from the hundreds of thousands of web sites located on the Internet

b)

several directories and indexes on the Internet that are available to assist the user in locating a particular topic from the hundreds of thousands of web sites located on the Internet

c)

considered a depository of information stored in the computers connected to the Internet across the world

d)

considered a depository of information stored in the computers connected to the Internet across the world only through email

e)

a way to provide higher speed broadband connections

8.

Law enforcement faces new challenges with Internet crimes. Which of the following best identifies these challenges?

a)

Most law enforcement officers are not trained in the technologies with Internet crimes spanning multiple jurisdictions and there is a need to retrofit new crimes to existing laws.

b)

Most law enforcement officers are well trained in the technologies with Internet crimes spanning multiple jurisdictions and there is a need to retrofit new crimes to existing laws.

c)

Most law enforcement officers are not well trained in the technologies with Internet crimes spanning a single jurisdiction and there is a need to retrofit new crimes to existing laws.

d)

Some law enforcement officers are well trained in the technologies with Internet crimes spanning a single jurisdiction but there is no need to retrofit new crimes to existing laws.

e)

Some law enforcement officers are not well trained in the technologies with Internet crimes spanning a single jurisdiction and there is a need to retrofit new crimes to existing laws.

9.

The task of forensic investigators includes all of the following except ____________.

a)

restoring deleted files and emails

b)

finding the hidden files through complex password encryption programs and searching techniques

c)

hiding files with encryption and embedding information in unrelated files

d)

tracking criminals through the digital trail — IP addresses, to ISPs, to the offender

e)

processing the crime scene in a manner similar to that of a traditional crime